A public extortion claim naming a Spanish ceramics company is unverified, but the tradecraft pattern behind Gunra shows why leak-site accusations can matter even before any breach is proven.